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In response to Examiner's comments accompanying the Advisory action mailed 
May 24, 2005, Applicant asserts that it has not been shown where Chen discloses 
intercepting incoming files before they reach a file system, as claimed by the present 
invention. Applicant respectfully requests that the Examiner reconsider the arguments 
presented previously, and asks the Examiner to answer the following questions: 

1. Does the Examiner consider an email system containing received emails to 
be a file system? 

2. Where does Chen teach scanning an email message before it reaches the 
email system? 

3. Why would Chen teach scanning all of the emails in an email system jf 
Chen teaches detecting viruses before they reach the email system? 

Examiner's attention is directed to Chen's explanation of FIG. 3 on Col. 7, 
reproduced below for the Examiner's convenience: 

Although the agent 110 of the present invention is generic to both databases and e- 
mail systems, for the sake of simplicity, the following discussion shall discuss only the 
scanning of e-mail messages. Further, it is assumed that a complete scan of all e-mail 
messages (i.e., all attached files for all databases and mail boxes) is to take place. In 
step 200, the agent 110 determines whether an attachment is present in an e-mail 
message. If an attachment does not exist, then the Agent 110 determines in step 240 
whether the entire mail system 140 has been scanned. If the entire mail system 140 has 
been scanned, then the agent 110 ceases operation. If, however, the entire mail system 
140 has not been scanned, then the agent 110 proceeds to the next e-mail message 
(step 235). If an attachment is present in an e-mail message, the agent 110 detaches 
the attachment (step 205), and it sends the attachment to the anti-virus application 
120 (step 210). If the anti-virus application 120 does not detect the presence of a 
virus in the attachment (step 215), then the agent 110 reattaches the attachment to the 
original e-mail message (step 220). 

Chen describes a system that scans an email (file) system for files having 

attachments that might bear viruses. Specifically, attention is drawn to Chen's statement 

In step 200, the agent 110 determines whether an attachment is present in an e-mail 

message. If an attachment does not exist, then the Agent 110 determines in step 240 
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whether the entire mail system 140 has been scanned. If the entire mail system 140 
has been scanned, then the agent 110 ceases operation. Ify however y the entire mail 
system 140 has not been scanned^ then the agent 110 proceeds to the next e-mail 
message (step 235). 

Thus, Applicant asserts that Chen's invention is simply combing through a file 
system (the email system) for emails that have attachments, and these emails have already 
been placed in the file system (email system). 

If an attachment is not found, agent 110 proceeds to the next email message. 
Absent some indication that these email messages being scanned are NOT in an email 
system, it must be assumed that they are, as Chen teaches proceeding to the next email 
message, not waiting for the next email message to arrive. Why else would Chen be 
checking to determine whether the entire email system has been scanned, other than to 
make a determination that any virus that already landed in the email system has been 
detected? If Chen indeed was scanning incoming emails before they reached the email 
system, why would there be a need to determine whether the email system has been 
scanned? Thus, Applicant submits that Chen teaches scanning of a file system that does 
not occur until after the message (and its attachment) reaches the file system. 

Respectfully submitted, 
§^RRA PATENT GROUP, LTD. 

Dated: May 27, 2005 
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